DoX: A peer-to-peer antidote for DNS cache poisoning attacks

IEEE International Conference on Communications

Volumn 5, Issue , 2006, Pages 2345-2350

  Yuan, Lihua ^a   Kant, Krisnna ^b   Mohapatra, Prasant ^a   Chuah, Chen Nee ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b INTEL CORPORATION   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CACHE MEMORY; CONFORMAL MAPPING; CRYPTOGRAPHY; SERVERS;

CACHE POISONING ATTACKS; DOMAIN NAME SYSTEM (DNS); MAPPING SERVICE;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 42549110051     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2006.255120     Document Type: Conference Paper

References (18)

1. Symantec Corporation, "Symantec gateway security products DNS cache poisoning vulnerability," http://securityresponse.symantec.com/avcenter/ security/Content/2004.06.21.html, 2004.
2. K. Haugsness and the ISC Incident Handlers, "DNS cache poisoning detailed analysis report version 2," http://isc.sans.org/presentations/ dnspoisoning.php, 2005.
3. I. Green, "DNS spoofing by the man in the middle," http://www.sans.org/rr/whitepapers/dns/1567.php, 2005.
4. Netcraft Ltd., "DNS poisoning scam raises wariness of 'pharming'," http://news.netcraft.com/archives/2005/03/07/ dns_poisoning_scam_ raises_wariness_of_pharming.html, 2005.
5. J. Evers, "DNS servers-an Internet Achilles' heel," http://news.com.com/ DNS+servers--an+Internet+Achilles+heel/2100-7349_3-5816061. html, 2005.
6. S. Kwan, P. Garg, J. Gilroy, L. Esibov, J. Westhead, and R. Hall, "Generic Security Service Algorithm for Secret Key Transaction Authentication for DNS (GSS-TSIG)," 2003.
7. K. Kant, R. Iyer, and P. Mohapatra, "Architectural impact of secure socket layer on internet servers," in International Conference on Computer Design, 2000.
8. D. E. Kaminsky, "Black Ops of TCP/IP 2005," http://www.doxpara.com/, 2005.
9. V. Ramasubramanian and E. G. Sirer, "Perils of transitive trust in the Domain Name System," in Proc. International Measurement Conference, 2005.
10. C. Schuba, "Addressing weakness in the Domain Name System protocol," Master's thesis, Purdue University, 1993.
11. "Description of the DNS server secure cache against pollution setting," http://support.microsoft.com/kb/316786/EN-US/, 2005.
12. J. Stewart, "DNS cache poisoning - the next generation," http://www.securityfocus.com/guest/17905, 2003.
13. "dmoz - open directory project," http://www.dmoz.org.
14. P. Cao and C. Liu, "Maintaining strong cache consistency in the world wide web," IEEE Transactions on Computers, vol. 47, no. 4, 1998.
15. M. Theimer and M. B. Jones, "Overlook: Scalable name service on an overlay network," in Proc. 22nd ICDCS, 2002.
16. R. Cox, A. Muthitacharoen, and R. T. Morris, "Serving DNS using a peer-to-peer lookup service," in Proc. IPTPS, 2002.
17. K. Park, V. Pai, L. Peterson, and Z. Wang, "CoDNS: Improving DNS performance and reliability via cooperative lookups," in Proc. 6th Symposium on Operating Systems Design and Implementation, 2004.
18. "Netcraft toolbar," http://toolbar.netcraft.com, 2005.